Finding Web Vulnerabilities (a primer)